diff options
| author | Lin Bai <lbai@codeaurora.org> | 2018-09-12 11:46:55 +0800 |
|---|---|---|
| committer | Lin Bai <lbai@codeaurora.org> | 2018-09-12 11:46:55 +0800 |
| commit | 6c8c527908d08396150029e08cdb42f4e1e5f2d1 (patch) | |
| tree | efb5c4d366f54c36f47e6df2cfc3d857426256bc /tools/perf/scripts/python | |
| parent | dbdc4e0fc9161ed97e91e3f0cb553a181e7ed8b7 (diff) | |
qcacld-2.0: Check channel_count in DCC_GET_STATS command
Invalid channel_count may be sent to driver with
QCA_NL80211_VENDOR_SUBCMD_DCC_GET_STATS vendor command, and may also
pass the sanity check with get_stats_param->request_array_len as
integer overflow, in send_dcc_get_stats_cmd_tlv().
Then it will finally lead to heap overflow when initializing
TLV header for each channel.
Change-Id: I1d81b5fc4de80829433f2a0ab41c964c41f750c3
CRs-Fixed: 2313756
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions